dx-packages team mailing list archive

[mlaverdiere <1073114@xxxxxxxxxxxxxxxxxx>]

On the basis of EFF recommandations, here the what's need to be done to
solve this bug, considering  the stagnation/progress/regession observed
since Ubuntu 12.10:

- Disable "Include online search results" by default -----> Nothing has
been done.  To do.

- Explain in detail what Canonical does with search queries and IP
addresses, how long it stores them, and in what circumstances it gives
them to third parties -----> Regression since 13.10, as the untranslated
legal notice is more difficut to find.  It has been relegated to an
obscure "Diagnostics" tab, in the "Security and Privacy" panel, in the
System settings, instead of being available at the bottof right corner
of the Dash.  So, at leat, it needs to be translated.  Also, if it has
to remain in the"Security and Privacy" panel, it should be in a more
properly designated tab.  Also, if the online search remains activated
by default, there should be some sort of proheminent popup that would
ask for user attention, upon first login or first access to the Dash,
refering him/her to the legal notice and asking him what he/she wants to
do with online search (and related scopes).

- Make the Search Results tab of the Privacy settings let users toggle
on and off specific online search results, as some users might want
Amazon products in their search results, but never anything from
Facebook.  -----> Some progress has been made with 13.10, as now, in
adition to be able to disable onlne search, within the "Security and
Privacy" panel, users can also deactiate some particular scopes (or
sources?), by right cliking on them, in the Dash, and then clicking for
deactivation.  Now the process is tedious if, as an example, a user only
wants 1 or 2 scopes to be activated.  One solution could be to include
these options in the "Security and Privacy" panel (which would be more
coherent, if done in a proper way) with a complete list of the sources,
and with some easy and quick way to turn some of them on or off.

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to libunity in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1073114

Title:
  Shopping Lens Does Not Respect User Privacy

Status in “libunity” package in Ubuntu:
  Confirmed
Status in “unity-lens-shopping” package in Ubuntu:
  Confirmed
Status in “libunity” source package in Quantal:
  Confirmed
Status in “unity-lens-shopping” source package in Quantal:
  Confirmed
Status in “libunity” source package in Raring:
  Confirmed
Status in “unity-lens-shopping” source package in Raring:
  Confirmed

Bug description:
  See this from the Electronic Frontier Foundation (EFF), a well
  respected "international non-profit digital rights advocacy and legal
  organization" (as described on Wikipedia):
  https://www.eff.org/deeplinks/2012/10/privacy-ubuntu-1210-amazon-ads-
  and-data-leaks

  Obviously, despite some improvements that have came late in the 12.10
  development cycle, there are still serious privacy concerns with the
  unity shopping lens.  To be more precise, here are the main problems
  to be fixed according to EFF:

  - Disable "Include online search results" by default.

  - Explain in detail what Canonical does with search queries and IP
  addresses, how long it stores them, and in what circumstances it gives
  them to third parties.

  - Make the Search Results tab of the Privacy settings let users toggle
  on and off specific online search results, as some users might want
  Amazon products in their search results, but never anything from
  Facebook.

  Here is another related bug:

   #1055952 Direct data leaking to Amazon:
  https://bugs.launchpad.net/ubuntu/+source/unity-lens-
  shopping/+bug/1055952

  ProblemType: Bug
  DistroRelease: Ubuntu 12.10
  Package: unity-lens-shopping 6.8.0-0ubuntu1
  Uname: Linux 3.5.6-030506-generic x86_64
  NonfreeKernelModules: wl
  ApportVersion: 2.6.1-0ubuntu6
  Architecture: amd64
  Date: Tue Oct 30 06:35:38 2012
  InstallationDate: Installed on 2012-02-12 (260 days ago)
  InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
  MarkForUpload: True
  SourcePackage: unity-lens-shopping
  UpgradeStatus: Upgraded to quantal on 2012-09-28 (31 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libunity/+bug/1073114/+subscriptions